Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Group Policy Editor "Disable Software Install"

26 Jun 2014   #1
chubalz

Windows 7 Ultimate 64 Bit SP1
 
 
Group Policy Editor "Disable Software Install"

How to disable from installing software using gpedit.msc?

User Account is Administrator.

I want to block different kinds of software.

Utorrent
Internet Download Manager
Etc.




And also if the software was already installed like Google Chrome.

What will happen if chrome is updating? will the update be successful? even in group policy is restricted to install?


Thanks in advance.


My System SpecsSystem Spec
.
26 Jun 2014   #2
phantomofrussia

Windows 7 Ultimate x64
 
 

Editing the Local Group Policy to block people from installing software is a little extreme in my opinion. It can certainly be done but it might just be easier to create another user account that is a standard user account and have everybody use that. If they try to install something, they will need admin permissions to do so.

Just my 2 cents.
My System SpecsSystem Spec
26 Jun 2014   #3
Brink

64-bit Windows 10 Pro
 
 

In addition, it would be pointless to try and block an administrator account since they are able to just as easily unblock it with their own administrator rights.

The only true way is to make them standard user accounts as PhantomofRussia posted above.
My System SpecsSystem Spec
.

26 Jun 2014   #4
LMiller7

Windows 7 Pro 64 bit
 
 

Trying to limit what an admin account can do is an exercise in futility. Any policy you put in place can be modified or removed by any other admin. All of this is by design. All admin accounts are equal. The built in Administrator account is a little different but not relevant to this situation.
My System SpecsSystem Spec
26 Jun 2014   #5
chubalz

Windows 7 Ultimate 64 Bit SP1
 
 

Tnx phantomofrussia, Brink and LMiller7 for the reply.

Well im the only person who will knows how to do it. They cannot unblock it.

How about applocker?

Can applocker block specific software from installing? even if its not installed yet?
My System SpecsSystem Spec
27 Jun 2014   #6
phantomofrussia

Windows 7 Ultimate x64
 
 

chubalz, please try to understand that what you are trying to do is hammer in a nail with a sledgehammer. Extreme overkill. Local Group Policy and Applocker are primarily used in a domain environment by system administrators. Even then in those environments do they rarely allow users to have an admin account on the computer.

As Brink and LMiller7 have said even though you lockdown the computer through Group Policy or AppLocker, the users will have admin rights on the computer. Let me tell you from expierence, when a user wants to do something like install a program, they will start to try and do that. That may involve them messing around with the system and since they have admin rights, they might break something and have fun fixing that then. They might go onto a forum and ask how to do that. They will either accomplish that or they will break something and then you will be stuck fixing it.

There is a reason why you can have a standard user that is only able to basic things on a computer and this would be one of them.
My System SpecsSystem Spec
27 Jun 2014   #7
LMiller7

Windows 7 Pro 64 bit
 
 

There are 2 solutions for your problem.

1. Make the users limited users, not admins. Many organizations are doing this and you need to consider it.
2. If the users must be admins. Establish policies known to all regarding what is permitted and what is not. Having admin rights is a position of trust and users must show that they are worthy.

Limiting the powers of an admin account is NOT a viable option.
My System SpecsSystem Spec
27 Jun 2014   #8
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

From post #8 by LMiller7.

Quote:
Having admin rights is a position of trust and users must show that they are worthy.
That says it all.
If the trust is lost then so is the administrator privileges.
My System SpecsSystem Spec
28 Jun 2014   #9
chubalz

Windows 7 Ultimate 64 Bit SP1
 
 

Btw. im using Deep Freeze.

So even in admin rights they cannot save settings upon restarting the computer.
My System SpecsSystem Spec
Reply

 Group Policy Editor "Disable Software Install"




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Remove the "Safety" tab from IE 11 tools with group policy
Is there any way to remove the "Safety" tab or it's contents from the tools button in the upper right hand corner of IE 11 with Group Policy 2008 r2. I am using a GPMC on a windows 8.1 computer running IE 11. All of the computers we manage are Windows 7 pro running IE 10 or IE 11. The computers I...
General Discussion
Group Policy "Preferences" folder missing
Hi, I hope I'm in the right sub-forum. (Otw. please move, thank you). There are a few things that I need to do. Tutorials on the web always tell me to open gpedit.msc and then expand the "Preferences" folder under user configuration. However, there is no such folder. Can anyone help me? I'm...
Performance & Maintenance
Office 2010 - Disable "encrypt with password" using Group Policy?
Hi all, I would like to disable the "encrypt with password" option using Group Policy. Where I work using this option is a disaster waiting to happen (users lose passwords all the time). You can find this setting in Word - goto FILE, INFO, PROTECTED DOCUMENT, ENCRYPT WITH PASSWORD. I've...
Microsoft Office
group policy editor
i would like to know if there is a way to get the group policy editor to work for windows 7 home premium
General Discussion
Group policy disables "optimize for best appearance" setting
Hi everyone, I have recently been granted admin rights on my work computer. While the computer was locked down, the Aero visual effects were set to "adjust for best performance". I can change it to "adjust for best appearance" and the Aero effects appear - until I reboot the computer....
Customization
Group Policy Editor or Local Security Policy
Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator. Could anyone let me know if this is possible and how to do it? Much thanks.
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:47.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App